Hi,
First, thank you for choosing our Theme and Plugin.
Could you please elaborate on the matter further? Could you please specify which file and on which line you found it? Thank you so much for your attention and participation.
Kind Regards,
Givi
Thread Starter
lovre
(@lovre)
Hi, it’s in plugin.php under “Register DOMPurify”, line 546 (‘https://cdnjs.cloudflare.com/ajax/libs/dompurify/3.0.6/purify.min.js’) loading third-party request (Cloudflare analytics). I’ve tried to delete that line but then Post Grid and other widget aren’t loading. Both me and my customers want maximum privacy and no tracking so there are no third-party requests on other websites where your addon is not installed.
TY
Thread Starter
lovre
(@lovre)
*One website is also loading “https://cdn.canvasjs.com/canvasjs.min.js” located in plugins/royal-elementor-addons/assets/css/lib/animations/text-animations.min.css although there are no animations on the website
Hi again,
Unfortunately, I cannot help you in this case. I apologize for the situation and thank you for your understanding and cooperation.
Kind Regrads
Givi
Thread Starter
lovre
(@lovre)
I’ve managed to remove third party cookie (cdnjs.cloudflare.com), nothing is broken but since DOMPurify 3.0.6. is extremely vulnerable (CVE-2024-47875) you should do something about it or abandon DOMPurify which is added in last two versions of your plugin (1.7.1029 and 1.7.1030)
*cdn.canvasjs.com has nothing to do with Royal Elementor Addons, my mistake because it was problem with cache
Plugin Contributor
George
(@rubeushagrid13)
Hi again,
We’ve updated it to latest version and update will solve all of the issues.
Totally removing it will cause some js bugs across our widgets.
Kind regards,
George
Thread Starter
lovre
(@lovre)
I know, tested it. Since your plugin is great and offers great features even in free version, after updates will apply my “fix” to remove cdnjs.cloudflare.com since my clients nor me use Cloudflare service.
Thank you, keep up the good work
Plugin Contributor
George
(@rubeushagrid13)
Hi again
In the next update it will be included in plugin directly without loading from cdn so you can ignore custom fix you used before, hope we’ll release it very soon
Kind regards,
George
